WP Ghost Premium for WordPress Security

WP Ghost Premium is the paid edition of WP Ghost, a WordPress security and firewall add-on. It adds a maximum security path preset, automated responses, event monitoring, cloud retention, email alerts and AI crawler controls.

Change paths and apply Ghost Mode

WordPress sites commonly expose paths such as /wp-admin, /wp-login.php, /wp-content and /wp-includes. WP Ghost can change and secure common WordPress, plugin and theme paths, reducing the default route clues available to automated scanners. These changes do not fix vulnerable plugin code or replace login authentication.

Ghost Mode is a maximum security preset that changes all paths, hides file extensions and enables all hiding settings in one click. Frontend paths change by default for compatibility. To include administrative paths, add define('HMW_ALWAYS_CHANGE_PATHS', true); to wp-config.php, then save the WP Ghost options again.

Review findings and respond to threats

The Security Check delivers a score from 0 to 100, severity bands and prioritized tasks. It works independently of AI Security Explanations, which turn findings into a website-specific summary, plain-language risk descriptions, suggested actions and further reasoning about each finding. AI explanations require a connected WP Ghost account, an active subscription and use a monthly allowance of checks.

An AI explanation request sends the Security Check findings and six setup details: server type, configuration-file writability, rewrite-rule presence, cache-plugin presence, security mode and mapped-file count. It excludes page content, user entries, passwords and database rows.

IP Block Automation can block addresses that trigger repeated security threats. Email alerts cover brute-force lockouts and disabled logs, with optional weekly threat summaries.

Search and retain event records

• Security Threats Log: Review unlimited entries by threat type, status, country or time range. Search the log, paginate results and export them to CSV.
• User Events Log: Search unlimited user-event entries, paginate results and export them to CSV.
• Cloud Event Storage: Keep events in the cloud for 30 days for audit history and incident reports.
• Security score: Track a 0-to-100 score based on completed security tasks and enabled features.

Set AI crawler rules

AI Copyright Protection blocks more than 30 AI training crawlers at the firewall and adds Disallow rules to robots.txt. Examples include GPTBot, ClaudeBot, PerplexityBot, CCBot and Bytespider; the list is updated with plugin releases. The crawler rules do not affect regular Google, Bing or Yahoo search visibility. PerplexityBot also works with AI search discovery, so blocking it can limit discovery in that service.

Install and configure

Install and activate WP Ghost Premium in WordPress, review the security settings and enable the hardening features suited to your website. Use Overview and Security Check to review the score, findings and prioritized tasks. Run Frontend Check or Ghost Doctor to verify paths and assets after changes. WP Ghost changes frontend paths by default for compatibility. To include administrative paths, add define('HMW_ALWAYS_CHANGE_PATHS', true); to wp-config.php and save the settings again.